summaryrefslogtreecommitdiff
path: root/libexec/rc/rc.d/securelevel
blob: e5c5a410cf6245e2bc8bc3e14345eb13b3c9c712 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
#!/bin/sh
#
#

# PROVIDE: securelevel
# REQUIRE: adjkerntz ipfw pf sysctl_lastload

. /etc/rc.subr

name="securelevel"
desc="Securelevel configuration"
rcvar='kern_securelevel_enable'
start_cmd="securelevel_start"
stop_cmd=":"

securelevel_start()
{
	if [ ${kern_securelevel} -ge 0 ]; then
		echo 'Raising kernel security level: '
		${SYSCTL} kern.securelevel=${kern_securelevel}
	fi
}

load_rc_config $name

# doesn't make sense to run in a svcj: config setting
securelevel_svcj="NO"

run_rc_command "$1"